US Justice Department puts hacker groups on alert after X cyber attack
Attorney General Todd Blanche has said that the Justice Department is going after the cyber criminals who bombarded X users with unrequested password-reset emails this week.
The platform maintains that no accounts were compromised because the attack was disrupted in time.
Password reset attack on X
On September 2, 2026, Attorney General Todd Blanche wrote on X that “hundreds of thousands of X users” were affected by a coordinated attempt to hijack accounts through the password-recovery flow. He credited the company with stopping the attack in time and preventing user accounts from being compromised.
Blanche added that investigators are “working closely with X to track down the criminals.”
The attack first came to light on September 1, when users began posting about receiving waves of reset messages. Some inboxes reportedly collected about ten emails in a short window around 9:30 a.m. Eastern.
The messages appeared to genuinely come from the company as they were sent from the official email (info@x.com) and carried the six-digit code needed to finish a reset. Despite this, X engineer Mridul Singhai said the company found no sign of a breach. He also apologized for the volume of emails.
… Continue reading the full article at the original source below.
